December 2003 - cypherpunks-legacy

Check out the New ZDNet and ZDTV Forums!
by ZDNet Announce 17 Dec '03

17 Dec '03

Dear Forum Member: If you are reading this message, you are a participant in the ZDNet or ZDTV message boards (a.k.a. ZDNet Forums or Community). I would like to take this opportunity to tell you about some changes that will affect you on December 8. We are moving from our current forum software, called Podium, to version 1.0 of new forum software created by Deja News. On Dec. 8, when you follow a link or bookmark to one of our forums, you will be directed to the new software automatically. You don't have to download or install anything -- our forums remain entirely Web-based -- but the apearance and functions of the forums will be different. All your messages posted in Podium are being brought over, so your conversations won't miss a beat. We have been testing the Deja News software in three of our current forums for several months, and we have also created a test forum so you can try out the software and give us your feedback. We know that any change is disruptive; you will have to re-learn some forum functions and get used to a new interface. We apologize in advance for the hassle. We felt the switch to the Deja News software was the only way to improve the performance and reliability of the forums, plus the new software has a better search engine and great possibilities for integrating Usenet newsgroups into our offerings. If you have not yet had a chance to try out the new software, you can do so at any one or all of the forums listed below: Test Forum http://chkpt.zdnet.com/chkpt/zdn11202/f5.dejanews.com/frames/test.html Help Channel General Discussion http://chkpt.zdnet.com/chkpt/zdn11202/f5.dejanews.com/frames/generaldiscuss… Microsoft Office http://chkpt.zdnet.com/chkpt/zdn11202/f5.dejanews.com/frames/msoffice.html Gadget Gab http://chkpt.zdnet.com/chkpt/zdn11202/f5.dejanews.com/frames/gadget.html Please give us your feedback about the new software in the Test Forum. We are using your comments to make the software work better, so we appreciate as much of participation as possible. In addition to the new software, we will be merging several forums. Over the months, ZDNet and ZDTV have created a number of overlapping message boards, and some forums have lost their appeal to users. As part of the switch to Deja News, we'll be integrating forums on similar topics. As a result, expect most forums to be busier after Dec. 8. Thank you for your time and effort. We are looking forward to seeing you in the new forums, and we are glad to have you as a part of the ZDNet Community. We will send you just a few more e-mails like this one to keep you up-to-date on the switch, but we promise not to continue spamming you after the transition is complete. Regards, Wendy Frankwich ZDNet and ZDTV Community http://chkpt.zdnet.com/chkpt/zdn11202/www.zdnet.com http://chkpt.zdnet.com/chkpt/zdn11202/www.zdtv.com _______________________________________________________________________ To be removed from this list, simply reply to this message with "unsubscribe" as your subject.

1 0

Re: "Export" controls
by Anonymous 17 Dec '03

17 Dec '03

>Can you give me an example of a commercial vendor who has suffered >because someone bought a "dangerous" product ( Windows, for example ) at >retail and carried it out of the country in a suitcase? My guess would I cannot give such example because hard crypto products are not available to the general public. I am unaware that microshit OS has hard crypto built-in. The only hard crypto package I have ever seen for sale at mail-order (and thus not anonymous) is NAI's PGP (and I have never seen any hard crypto available in a store for cash - but that can only mean that there is no perceived demand). However, any hard crypto that would work on system level and encrypt all communications is not available for purchase (it is available for free, though, in the form of IPSec package with 128-bit block ciphers for *BSD operating systems.) There is a number of VPN companies that offer crypto boxes, but AFAIK they either do not mention crypto scheme they use or they say DES. There is only one VPN company that advertises 128-bit crypto in it's product. >> [ For example, try to buy one of IBM crypto-cards - give them a call >> and ask what does it take to purchase one with hard crypto on it >> >Save me the phone call and describe your experience. BTW - IBM derives a You'll miss all the fun. After talking to 5-6 departments one concludes that no one knows anything about 4758, but they are all nice and helpful, and forward your call to each other. 4758 does not exist for casual callers. My guess is that if you have been dealing with IBM for some time you may be able to get it. To recap, there are no hard crypto drop-in hardware products available to general public in the USA today. >just write a damn book, source, VHDL etc. You can even export that. My The question is how to make money by selling hard crypto in the US. NAI seems to be the only company that can get away with so-called "publishing exception" in the commercial world. Their joining the key recovery alliance is probably unrelated :-) >Disk encryptor - SCSI/EIDE, a bump in the wire between the motherboard >and the disk drive. With its own smartcard/keypad interface, keys are >never seen by OS. It doesn't solve the security problem while the system There are many neat ideas. But no hardware.

1 0

L5 algorithm patent, and free eval version
by Anonymous 17 Dec '03

17 Dec '03

On Mon, 5 Oct 1998, Joey Roa wrote: > My name is Joey Roa and I am Professional Services Team Leader of JAWS > Technologies Inc. I have recently become aware of your list. A colleague > ... > The L5 algorithm is not yet published as we are waiting assurances from out > patent attorneys that we have some protection for marketing purposes. Hello Joey et all, Now that L5 has been patented, will you and your colleagues at Jaws Technology make the L5 algorithm details available to the professional cryptography community for independant verification. Could you also provide the Canadian and/or US patent numbers? (Announcement of L5 patent: <http://www.newswire.ca/releases/October1998/27/c6731.html>) To cypherpunks readers, the free "shareware" version is available from: <http://www.jawstech.com/products/jawsl5/download-free-trial/L5_ShareWare_Se…> I think the coderpunks readers might enjoy playing with this program. It has proven entertaining so far for me.

3 2

Re: Matt Blaze arrested???
by Anonymous 17 Dec '03

17 Dec '03

> X-Originating-IP: [208.198.164.2] > From: "jim finder" <jim_finder(a)hotmail.com> > To: cypherpunks(a)cyberpass.net > Cc: cryptography(a)c2.net, mab(a)research.att.com > Subject: Matt Blaze arrested??? The originating IP for this hotmail posting is lpwa.com, the Lucent Personalized Web Assistant. Ken Williams had posted a URL last week which described how to send anonymous mail using lpwa as a proxy to the hotmail service: > I came across a funny article about a "CIA, DEA, FBI, Lucent > Technologies, Replay.com, Seed-bank.com Grand Conspiracy" at > http://members.tripod.com/~spookbusters/sunnysnooping.htm This is easy to do and provides moderate levels of anonymity. You set lpwa.com as your proxy in the browser settings, and then set up your hotmail account and send the mail. Maybe Jim Finder was just testing the idea. Blaze has attracted one or two cranks who try to harrass him, and this may be another attempt to make some trouble for him.

1 0

Y2K and Atlas
by Matthew James Gering 17 Dec '03

17 Dec '03

-----Original Message----- From: [somebody] Sent: Tuesday, December 01, 1998 5:04 PM To: philosophy of objectivism Subject: For the ARF Ed Yourdon is name known to aging geeks as the developer of structured systems analysis & design. His text on the subject is still in use in C.S. courses around the country. He's also the author of a dozen or so books about programming, particularly mainframe programming. In early 1998 Yourdon and his daughter Jennifer co-authored "Time Bomb 2000: What the Year 2000 Computer Crisis Means to You." (As you might infer from the title, the Yourdons aren't exactly sanguine about the potential impact of the Y2K problem.) (Nor am I.) Yourdon maintains a web site featuring, among many other things, reading list both technical and non-technical about programming and Y2K. Introducing his non-technical list of Y2K books, he recommends Atlas Shrugged with the following comment: >As for Ayn Rand's Atlas Shrugged ... well, you probably read it in >college, but you've probably forgotten all about it. You probably don't >remember John Galt's famous line, "I will stop the engine of the world." >Well, read the book again now, with Y2K-colored glasses, and remember that >computer programmers are reading it, too. The question you need to ask >them is whether they intend to stay on the job if the lights go out on >January 1, 2000, and whether they feel sufficiently motivated to re-start >the engines of the world. If you don't think that's a question worth >asking, then you haven't read Atlas Shrugged. So I guess I'm not the only person to have made that connection... http://www.yourdon.com/books/coolbooks/coolby2kother.html

1 0

Re: "Export" controls
by Michael Motyka 17 Dec '03

17 Dec '03

> I am unaware that microshit OS has hard crypto built-in. > I was pointing out a retail parallel, not a crypto parallel. You sure it's not Microshaft? More meanings. > The question is how to make money by selling hard crypto in the US. > A little experiment is often a good thing. I heard that the guys who made the DES cracker have had $$ requests for machines and/or chips. > To recap, there are no hard crypto drop-in hardware products > available to general public in the USA today. > In case you missed it, my original reply was an attempt to open discussion on some type of cooperative effort. Look at http://www.xilinx.com/products/xc4000XLA.html for prototype purposes. I wonder how many DES or IDEA engines could be put on a 500K gate array? It would fit about 35 instantiations of Twofish. That should be enough for a phone or a disk encryptor. It's not trivial but - Products can be done. On a shoestring. By the right people. Even non-geniuses. Who want to get them done. <-- the key item No sense pushing the button without critical mass. sigh... A friend's t-shirt many years ago: A penny for your thoughts, twenty bucks to act them out.

2 1

A person who counsels to fail to comply with the Act
by Anonymous 17 Dec '03

17 Dec '03

Check out this bit of american slavery: "Failing to register or otherwise comply with the Military Selective Service Act is, upon conviction, punishable by a fine of up to $250,000, impris- onment for up to five years, or both. A person who knowingly counsels, aids or abets another to fail to comply with the Act is subject to the same penalties." www.sss.gov/teach3.pdf (for teachers, note) And this anti-FIJA bit: Except as may be authorized by a judge, no person or entity shall distribute or attempt to distribute any written materials tending to influence, interfere, or impede the lawful discharge of the duties of a trial juror, or communicate or attempt to communicate with any person summoned, drawn, or serving as a trial juror in the Superior Courts in Los Angeles for purposes of influencing, interfering, or impeding the lawful discharge of the duties of a trial juror in, or within 50 yards of any public entrance to, the facilities within which the Superior Courts conduct jury trials within this County. (Rule 5.2 added and effective 7/1/97.) http://www.co.la.ca.us/courts/superior-auc/CourtRules/Chapter5.htm#5.2

1 0

test1 #1
by ichudov＠Algebra.COM 17 Dec '03

17 Dec '03

test 1

1 0

Re: Matt Blaze arrested???
by jim finder 17 Dec '03

17 Dec '03

>Date: Wed, 02 Dec 1998 11:36:51 -0500 >From: Matt Blaze <mab(a)research.att.com> > >I'm afraid you're confused. Whoever this report was about, it >wasn't me: > >* I'm not at Lucent Bell Labs. (I'm at AT&T Shannon Labs.) I'm not > aware of any other Blaze at either AT&T or Lucent, however. >* I'm not a mathematician. (I'm a computer scientist.) >* I've not been to ORD, or any other midwestern airport, > since August. (I do fly a lot, though). >* I never been arrested. (I did accently set off the antitheft > detector at a local bookstore once, but they let me go > when I showed them my reciept). > >-matt > Thanks for clarifying this! I'm very sorry to have started an unfounded rumor but I'm glad to know that you haven't been arrested. Thankfully, it looks like everyone assumed that I was just making this up, so I hope no serious damage was done and that the rumor didn't spread. That said, there <*was*> a radio report. It was on WBEZ 91.5 last night, and, as I said, I only heard the last part of the report. It was a news report about an arrest made at the O'Hare airport for something involving mathematics and foreign governments. I was almost 100% sure they said it was Blaze of Bell Labs who was arrested, but I guess it possible that I misheard. Perhaps they were quoting you or talking about you for some other reason. I remember that someone at bell labs (you???) had some problems with export authorities a few years ago, and maybe this is what they were talking about? Anyway, has anyone heard any more about this story, now that we know it wasn't Matt Blaze who was arrested? Humble Apologies, Jim PS I'm using a non-work account because I work for a large Chicagoland company that does some crypto business and I <*do not*> want to be seen as representing them on the cypherpunks list. Some of the work they do goes against cypherpunk (and my own) goals, and I'd rather not have people think I'm speaking for them. ______________________________________________________ Get Your Private, Free Email at http://www.hotmail.com

1 0

SASMF, Part 1
by Anonymous 17 Dec '03

17 Dec '03

Space Aliens Stole My Freedom, Part 1 Know Your Gutless SheepleCustomer(TM) Let's just take a peek at how the new FDIC proposed reg would look if transposed into an FCC setting: ----- "Know Your Customer" Requirements AGENCY: Federal Communications Commission ACTION: Notice of proposed rulemaking. SUMMARY: The FCC is proposing to issue regulations requiring FCC-supervised communications carriers to develop and maintain "Know Your Customer" programs. As proposed, the regulations would require each carrier to develop a program designed to determine the identity of its customers; determine its customers' sources of communicated information; determine the normal and expected calls of its customers; monitor account activity for calls that are inconsistent with those normal and expected callss; and report any calls of its customers that are determined to be suspicious, in accordance with the FCC's existing suspicious activity reporting regulations. By requiring communication carriers to determine the identity of their customers, as well as to obtain knowledge regarding the legitimate activities of their customers, the proposed regulations will reduce the likelihood that communications carriers will become unwitting participants in illicit activities conducted or attempted by their customers. It also will level the playing field between carriers that already have adopted formal Know Your Customer programs and those that have not. --- Minimum steps to take to comply with the Know Your Customer rule. Identify the customer. If a communication carrier offers private leased communication services, it is important that the carrier understand a customer's personal and business background, source of information to be communicated, and intended use of the private leased communication services. --- The extent of the information regarding the customer that may be necessary to fulfill the carrier's Know Your Customer obligations should depend on a risk-based assessment of the customer and the calls that are expected to occur, and should be addressed within the communication carrier's Know Your Customer program. --- Determine the source of information. Paragraph (d)(2)(ii) requires that the Know Your Customer program provide a system for determining the source of a customer's information. The amount of information needed to do this can depend on the type of customer in question. Determine normal and expected calls. Paragraph (d)(2)(iii) requires that the Know Your Customer program provide a system for determining a customer's normal and expected calls involving the communication carrier. A carrier's understanding of a customer's normal and expected calls should be based on information obtained both when an account is opened and during a reasonable period of time thereafter. It also should be based on normal calls for similarly situated customers. Without this information, an institution is unable to identify suspicious calls. Monitor the calls. Paragraph (d)(2)(iv) requires that the Know Your Customer program provide a system for monitoring, on an ongoing basis, the calls conducted by customers to identify calls 'that are inconsistent with the normal and expected calls for particular customers or for customers in the same or similar categories or classes.' The proposed regulation does not require that every call of every customer be reviewed. Rather, it requires that a financial institution develop a monitoring system that is commensurate with the risks presented by the accounts maintained at that institution. Determine if call should be reported. Once a call is identified as inconsistent with normal and expected calls, paragraph (d)(2)(v) requires that a communication carrier determine if the call warrants the filing of a Suspicious Activity Report. This is consistent with an carrier's existing obligations under 12 CFR 353.3(a). --- A. Reasons for and objectives of the proposed rule. The proposed Know Your Customer rule is designed to deter and detect communication crimes, such as obscene phone calls, getting tax advice, and discussing the Constitution. B. Requirements of the proposed rule. The proposed rule would require communication carrier to identify their customers, determine their customers' normal and expected calls, determine their customers' sources of information communicated in calls, monitor calls to find those that are not normal and expected, and, for calls that are not normal and expected, identify which are suspicious. Know Your Customer monitoring would be similar to monitoring that communication carriers already do. For example, communication carriers monitor customer calls to ensure that calling volumes exceeding 10,000 per month are reported under the Communications Secrecy Act, to ensure that customers do not overuse their telephones, and to ensure that required calls are accurate and timely. ----- Editor's Note: Putting this in an FCC context makes it pretty clearly bizarre and unconstitutional, doesn't it? Where do these fuckers get off pulling this Nazi shit? Just to carry it all the way into Wonderland, we've drawn up this questionnaire, also in the telephone context: Sample Questionnaire 1. Is this a __residential or __business account? 2. Approximately how many calls do you expect per month? a. Incoming ____ b. Outgoing ____ 3. List the subject matter of expected calls (use extra sheets if necessary: ____ 4. List the telephone numbers from which you expect to receive calls (use extra sheets, etc.) ____ 5. List the telephone numbers to which you expect to place calls (use extra, etc.):____ 6. List the names of people with whom you expect to speak: 7. List the Social Security numbers of people with whom you expect to speak: ____ 8. List the political organizations to which you belong: 9. List the political organizations to which people with whom you expect to speak belong: ____ 10. Are any of the organizations in (8) or (9) on the Attorney General's list? Yes__ No__ 11. If the answer to (10) was Yes, do you have a current and valid waiver for that (those) organization(s)? Yes__ No__ 12. If the answer to (11) was No, proceed directly to federal prison. Do not pass urine; do not collect $200 from any ATM. 13. Do you regularly call your mother? Yes__ No__ 14. If the answer to (13) was Yes, list the topics you commonly talk about with your mother (use extra, etc.) 15. What are your sources of information for your telephone conversations?____ 16. List all facts known to you, about which you expect to speak in your telephone calls:____ 17. List all times at which you expect to receive or place calls:____ 18. Attach transcripts of all conversations you expect to have. In lieu of transcripts, recordings may be attached. 19. Staple this form to your head, jam a toilet plunger handle up your ass, waddle to the nearest telephone, dial "1" and say, "I'm ready. Pick me up." Wait at your front door. ----- FuckingFedUpMonger

1 0